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A system for data recipierjt invoked electronic transactions comprising: 
a network; and 



and wherein the at 



at least one data subject nework communication device (NCD) associated with at least one data 
subject and associc ted with the at least one data controller, connected to the network, 
least one data subject NCD further comprises NCD software for 
sending and receivinjg information over the network; 
the at least one data repository connected to the at least one data recipient computer via the 
network, wherein th s at least one data repository further comprises data repository 
software, and wherei l the data repository client software further comprises instructions 
for forwarding the authorized data recipient's offer to the at least one data repository via 
the NCD software, land wherein the data repository software further comprises 
instructions for gatherhg information to complete a transaction and for determining that 
the at least one authorized data recipient is authorized by the at least one data controller 
to receive information about the at least one data subject, 

2. The system in accordance with plaim 1, wherein the transaction is a transaction to purchase an 
item. 

3. The system in accordance with clajm pr'wherein the item purchased is goods or services. 

4. The system in accordance with cla\m 1, wherein the data repository further comprises instructions 
to send the purchasing information Jb the at least one authorized data recipient computer. 

5. The system in accordance with clainil, wherein the network is selected from group consisting of 
the Internet, intranet, local area networks (LANS), and wide area networks (WANS), wireless, 
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wireless local loops and cable networks. 

i 

The system in accordance with claim 1, wherein the network comprises at least two networks 



selected from group consisting 



of the Internet, intranet, local area networks (LANS), wide area 



networks (WANS), wireless, wireless local loops, and cable networks. 



The system in accordance wit 
data controller. 

The system according to claim 



The system according to claifn 
credit. 

The system in accordance wi 
and receive files in a common 
The system in accordance w 



claim 1, wherein the at least one authorized data recipient is the 



wherein the transaction is a transaction to convey information. 
The system according to clai(n 8 wherein the information conveyed is information for college 
admission. 

8 wherein the information is information for an applications for 



from a group consisting of HTML, XML, and WML. 



The system in accordance wi 
for reading and writing files 



claim 1 , wherein the client software and the NCD software send 
computer language. 

ith claim 11, wherein the common computer language is selected 



h claim 1 , wherein the NCD software further comprises a translator 
n the native language of the NCD software, and for reading and 



writing files in the native language of the client software. 

The system in accordance wit » cJa m 1, wherein the repository client software further comprises a 
translator for reading and writi ig files in the native language of the repository client software, and 
for reading and writing files in t ie native language of the NCD software. 

The system in accordance wit i claim 1 , wherein the data repository software further comprises 
instructions for assigning a unjque identifier to the at least one data subject and providing the 
unique identifier to the at least cine authorized data recipient. 



4/26/2000 Data Controller 042500.doc 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 



O 11 

il; 12 



^4 13 

V: r 

03 15 

3 

Die 



nj 17 

n 

■sir 

311 

U 19 
20 
21 
22 
23 
24 
25 
26 
27 



\ 



16. The system according to claim 1 

17. The system according to claim 1 



wherein the data repository is controlled by the data controller, 
wherein the NCD is a personal computer. 
18. The system according to claim £ wherein the NCD is a wireless device connected to the wireless 
network. 



19. 



20. 
21. 



22. 



The system in accordance with 
instructions to the NCD softw 



claim 1, wherein the repository client software further comprises 
ire for forward the authorized data recipient's offer to the data 
repository and for sending a message to the data repository indicating whether an NCD software 
identifier is present in the NCu software, and wherein the presence of an NCD software identifier 
indicates whether the NCD software was previously used in conjunction with the system. 
The system in accordance with claim 19 wherein the NCD software identifier is a cookie. 
The system in accordance wjth claim 19, wherein the data repository further comprises a data 
subject data structure which further comprises information pertaining to previous transactions by 
at least one registered data slubject, and wherein the at least one registered data subject is a data 
subject who has previously re 
The system in accordance 



(jittered with the system. 

kith claim 21, wherein the data repository further comprises storage 



1 



for storing the data subject ck tayfetructure. 

23. The system in accordance with claim 21, wherein the data repository further comprises at least 
one server for storing the date subject data structure. 

24. The system in accordance with claim 19, further comprising an authorized data recipient data 
structure comprising informal on which represents authorized data recipient information that is 
necessary for identifying th^ authorized data recipient and the authorized data recipient 
computer. 

25. The system in accordance with claim 24, wherein the authorized data recipient information further 
comprises contact informatio i, an authorized data recipient identification number, at least one 
network location for the authorized data recipient computer, accepted payment card types, 
accepted currencies, and accepted payment methods. 
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The system in accordance with claim 24, wherein the data repository further comprises storage 
for storing the authorized data recipient data structure. 

The system in accordance with claim 1, wherein the data repository further comprises: 

a data subject data structure which firther comprises information pertaining to previous 

transactions by at least one registered data subject, and wherein a registered data 

subject is a data subject who has previously registered with the system; and 
an authorized data recipient data structure which further comprises information which represents 

authorized data recipient information and which identifies the authorized data recipient 

and the authorized data recipient computer. 
The system in accordance with claim 27, wherein the data repository software further comprises 
instructions for selecting a data subject if the NCD software identifier identifies one or more 
registered data subjects who have used the data subject's NCD software in conjunction with the 
system. 

The system in accordance with claim 27, wherein the data repository software further comprises 
instructions for gathering the transaction information pertaining to the selected registered data 
subject from the data subject data/structure to complete a transaction. 

The system in accordance with cairn 27, wherein the data repository software further comprises 
instructions for selecting the transaction information for a selected registered data subject that is 
acceptable to the authorized dati recipient based on the authorized data recipient information in 



the authorized data recipient cajt 
The system in accordance wi 



structure. 

plaim 27, wherein the data repository software further comprises 
instructions for gathering the transaction information to complete the transaction by prompting the 
registered data subject for additional information to complete the transaction if the data subject 
data structure is missing information to complete the transaction. 

The system in accordance with claim 27, wherein the data repository software further comprises 



instructions for gathering the 



information to complete the transaction by prompting the data 



subject for the information whe in the data subject is a non-registered data subject. 
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1 33. The system in accordance with claim 27, Avherein the data repository software further comprises 

2 instructions for gathering information to complete the transaction by prompting the data subject 

3 for the information when the data recipient is not an authorized data recipient of the data 

4 controller that is associated with the data subject. 

5 34. The system in accordance with claim 2T7, wherein the data repository software further comprises 

6 instructions for allowing a registered data subject to enter information to identify the registered 

7 data subject thereby allowing the data repository software to access the registered data subject's 

8 information stored in the data subject data structure if the data repository software did not select 

9 the correct registered data subject. 
10 35. The system in accordance with cla/m 34, wherein the information which can be entered to identify 

p 1 1 the registered data subject compjjlsesja data subject identification number, email address, and a 

12 passphrase. 

*l 13 36. The system in accordance withTclaim 27, wherein the data repository software further comprises 

^\ 14 instructions for allowing a registered data subject to enter information to identify the registered 

^ 15 data subject thereby allowing/the data repository software to access the registered data subject's 

p 16 information stored in the data subject data structure if the registered data subject was not 

■'~ ] 

nj 17 associated with the data subject's NCD software. 

'£ ■ f 

3 18 37. The system in accordance with claim 34, wherein the information which can be entered to identify 

19 the registered data subject further comprises a data subject identification number, email address, 

20 and a passphrase. 

21 38. The system in accordance with claim 27, wherein the data repository software further comprises 

22 instructions for prorr/pting the selected data subject for the data subject's identification number 

23 and passphrase if the registered data subject was selected by the data repository software. 

24 39. The system in accordance with claim 27, further comprising a temporary data structure for storing 

25 for a limited amount of time information pertaining to a transaction. 

26 40. The system in accordance with claim 1 , wherein the authorized data recipient's offer comprises at 

27 least a authorized data recipient identifier, a price for the item, a digital signature of the authorized 
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44. 



45. 



CJ 16 46. 



47. 



48. 



data recipient, and a transaction number. 



41. The system in accordance with 



claim 40, wherein the authorized data recipient's offer further 



comprises a final price indicator tiat indicates that the price for an item is not final. 



The system in accordance with 
instructions for communicating 



;laim 27, wherein the data repository software further comprises 
the data subject's shipping address information to the authorized 
data recipient computer and fof calculating the final price for the item if the final price indicator 
indicates that the price for an item is not final. 

The system in accordance witfi claim 42, wherein the data subject's shipping address information 
communicated to the authorized data recipient further comprises the city, state, country and mail 
code of the data subject's snipping address. 

The system in accord a nee/ with claim 43, wherein the authorized data recipient computer further 
comprises instructions foj calculating the final price for the item being purchased based on the 
data subject's shipping address information. 

The system in accordance with claim 43, wherein the data subject's shipping address information 
communicated to the aphorized data recipient further comprises the shipping means. 
The system in accordance with claim 4539, wherein the authorized data recipient computer 
further comprises ins/ructions for calculating the final price for the item being purchased based on 
the data subject's shipping address information. 

The system in accordance with claim 35, wherein the data subject's shipping address is the email 
address where the (tern is being sent for items which can be delivered over the network. 



The system in accordance with claim 1, wherein the data repository further comprises a data 
subject transaction log for recording information relating to a registered data subject's purchasing 
transactions, afid wherein a registered data subject is a data subject who has previously 
registered with ihe system. 
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49. 



50. 



51. 



52. 



The system in accordance with claim 48, wherein the data repository further comprises storage 
for storing the data subject transaction log. 

The system in accordance with claim 49, further comprising at least one server to store the data 
subject transaction log. 

The system in accordancjb with claim 1, wherein the data repository further comprises an 
authorized data recipient tr ansaction log for storing information relating to transactions performed 
by the at least one authorized data recipient. 

The system in accordance with claim 51 , wherein the data repository further comprises storage 



for storing the authorized 



53. The system in accordance with claim 51, further comprising at least one server for storing the 



authorized data recipient 

54. The system according to 
determining that the datp 
subject. 

55. A method for authorized 
least one data subject, 
subject's NCD connecte 



ata recipient transaction log. 



ransaction log. 

claim 1 wherein the data repository further comprises instructions for 
recipient is authorized by the data controller associated with the data 



data recipient invoked electronic transactions over a network between at 
associated with at least one data controller, having at least one data 
to the network, at least one authorized data recipient, associated with 
the at least one data controller, having at least one authorized data recipient computer connected 
to the network, and at le ast one data repository connected to the network, comprising: 

requesting an authorized data recipient's offer from at least one authorized data recipient 
over a network >y at least one data subject using NCD software on the at least one data 
subject's NCD; 

invoking data r pository client software on the at least one authorized data recipient 
computer in response to the data subject's request for a authorized data recipient's offer, 
and wherein invoking the data repository client software further comprises: 

connecting the at least one data subject's NCD to the at least one data 
rep 
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invoking the data repository/client software; 

forwarding the authorized data recipient's offer to the least one data repository; 
determining that both the at least one data subject and one the at least one 

authorized data/ recipient are associated with the at least one data 

controller; and 

gathering the information by the data repository to complete a transaction. 

56. The method in accordance with claim|55 further comprising gathering information relating to the 
purchase of an item. 

57. The method in accordance with claim' 56 further comprising sending the purchasing information to 
the at least one authorized data recipient computer. 

58. The method in accordance with claim 56, further comprising sending the purchasing information 
to the at least one authorized data/recipient computer. 

59. The method in accordance with /claim 55, further comprising the client software instructing the 
data subject NCD software to forward the authorized data recipient's offer to the data repository 
and sending a message indicating whether a NCD software identifier is present in the data 
subject's NCD software. {/^^ 

60. The method in accordance w/th claim 59, wherein the sending of a message indicating whether a 
NCD software identifier is present in the data subject's NCD software further comprises the client 
software instructing the NCD software to forward a message and wherein the NCD software 
identifier is a cookie. 

61. The method in accordance with claim 55, further comprising accessing an authorized data 
recipient data structure in the data repository to determine the transaction information the at least 
one authorized data recipient requires to complete a transaction. 



62. The method in accord 



data recipient requires to 



nee with claim 56, further comprising accessing a data subject data 



structure in the data repository to gather the transaction information the at least one authorized 



complete a purchasing transaction. 



63. The method in accordance with claim 62, further comprising prompting the registered data 
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subject for additional transaction information to complete a purchasing transaction if the data 
subject data structure is missing transaction information which is necessary for the at least one 
authorized data recipient to complete a purchasing transaction. 

64. The method in accordance with claim (55, further comprising prompting the data subject for the 
transaction information when the data subject is a non-registered data subject. 

65. The method in accordance with chim 55, further comprising gathering the information to 



complete the transaction by promp 



ing the data subject for the information when the data 
recipient is not an authorized data recipient of the data controller that is associated with the data 
subject. 

The method in accordance with fclaim 55, further comprising the data repository software 
assigning a unique identifier to the/at least one data subject and providing the unique identifier to 
the at least one authorized data recipient. 

The method in accordance with claim 66, further comprising a registered data subject entering 
identifying information to allow af registered data subject to identify the registered data subject 
thereby allowing the data repository software to access the registered data subject's information 
from the data subject data structure if the data repository software did not select the registered 
data subject. 

The method in accordance with claim 67, wherein entering the identifying information further 
comprises a data subject entering the data subject's identification number, email address, and a 
passphrase. 

The method in accordancWith claim 66, further comprising a registered data subject entering 
identifying information to allow a registered data subject to identify the registered data subject 
thereby allowing the data repository software to access the registered data subject's information 



from the data subject data s 
subject's NCD software. 
The method in accordance 



ructure if the registered data subject is not associated with the data 



with claim 69, wherein entering the identifying information further 



comprises a data subject entering the data subject's identification number, email address, and a 
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71. The method in accordance with claim 66, further comprising prompting the selected registered 
data subject fp enter the data subject's identification number and passphrase when the registered 
data subject was selected by the data repository software. 

72. The method in accordance with claim 64, further comprising storing the data subject's transaction 
information in a temporary data structure when the data subject is a non registered data subject. 

73. The method in accordance with claim 72, further comprising transferring the data subject's 
transaction information from the temporary data structure when a non-registered data subject 
elects to become a registered data subject. 

74. The method in accordance with claim 63, further comprising sending the data subject's shipping 
address information to the authorized data recipient computer when a final price indicator in the 
authorized data recipient's offer indicates that the price for an item is not final. 

75. The method in accordance with claim 74, wherein sending the data subject's shipping address 
further comprises sending the data subject's city, state, country and mail code. 

76. The method in accordance with claim 75, further comprising the authorized data recipient 
computer calculating a final price based on the data subject's shipping address. 

77. The method in accordance with claim 55, further comprising recording information relating to a 
registered data subject's purchasing transactions, wherein a registered data subject is a data 
subject who has previously registered with the system. 

78. The method in accjkdance with claim 55, further comprising recording information s relating to 
transactions perforfrjettby the at least one authorized data recipient. 

79. The method in accordance with claim 66, wherein the assigning a unique identifier indicating 
whether a NCD software identifier is present in the data subject's NCD software further comprises 
the client software instructing the NCD software to forward a message and wherein the NCD 
software identifier is a cookie. 
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